Download.com Warning - Dangerous

[Amgeek]

I have just noticed that the Avast Software updater is now  using Cnet's Download.com to deliver the updates.

Download.com has long been know to "wrap" its downloads with dangerous (but profitable - for them) crapware (I am trying to be kind).
In fact, Download.com (and others) have been in the news this month (July 2013) for that very issue (including by Tom Merit - former Cnet employee - on "Tech News Today" and Steve Gibson during "Security Now".

While I do appreciate that it must be difficult to provide such a valuable resource (Avast) to so many for so little (free!) can you really justify sending these unsuspecting (and trusting) users into the jaws of the very people they, we (techs) and you (Avast) are trying to protect them from?

Who should I contact at Avast to have them change or remove these links.

Thanks
Ed Barnat
Amgeek.com

[alan3333]

Amen to this post. Download.com used to be a great site however they have went woefully downhill and are utterly untrustworthy.

[DavidR]

@ Amgeek
Deliver what updates and what makes you think this is the case (e.g firewall logs, etc.) ?

Even if this is correct - If it is virus definitions, that could well be hosted on a download.com the download is controlled by the avast.setup function and the data downloaded is validated/verified.

[Amgeek]

I know it because I am seeing it ( for the past several days) with my own two eyes.
Just to check I have just gone to the avast on a machine I have here. I checked its software updater. It reports several available including one or more for Jave. Clicked on it and was brought here:

http://download.cnet.com/Java-Runtime-Environment-JRE/3014-2378_4-10009607.html?part=runtime_32

You try and and see for yourself.

Ed

[Asyn]

Clicked on it and was brought here:

http://download.cnet.com/Java-Runtime-Environment-JRE/3014-2378_4-10009607.html?part=runtime_32

The link is OK.

[Amgeek]

The "link" is not the issue. Where it takes you is.

[Asyn]

The "link" is not the issue. Where it takes you is.

The download is OK as well.

[AntiVirusASeT]

I believe Amgeek is saying that downloads from cnet contains adware due to their bundled installer.

I have not seen updates provided for softwares directed to cnet's website but i would indeed prefer the original software publisher's download page compared to cnet's.

Edit: Thus, to Amgeek, the fact that Avast software updater is directing to cnet for software updates is not right.

[Amgeek]

Asyn, did you read my original post?

Ed

[Asyn]

I believe Amgeek is saying that downloads from cnet contains adware due to their bundled installer.

Well, I downloaded and checked the file. Everything is OK.

[Asyn]

Asyn, did you read my original post?

Ed

Sure.

[Amgeek]

Then you understand that it is not the link or file that is in question but that the lambs are being sent into the lion's den to get them that is the issue and the question is who do we contact to get that changed.

[igor]

What Asyn is saying is that those files are not wrapped with anything.
Or do you see anything that is?

[Asyn]

Then you understand that it is not the link or file that is in question but that the lambs are being sent into the lion's den to get them that is the issue and the question is who do we contact to get that changed.

Well, I don't like Cnet/Download.com as well (because of the facts you already mentioned), but if you get redirected there by the avast! SU, you shouldn't have any problems.

Anyway, you can contact Avast here: http://www.avast.com/contacts

[Amgeek]

What I am saying, Igor, is that it is dangerous to send the unsuspecting to that site. Period.